Sonatype’s updated component lifecycle management solution takes aim at the risk of vulnerable open-source software components.